movefasta/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-09 12:05:50 +03:00
Code Activity

nixos/zwave-js-ui: Add chown to allowed syscalls (#380999)

Browse source
This commit is contained in:
Arne Keller 2025-03-10 08:47:46 +01:00 • committed by GitHub
commit 9b62d5e280
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
nixos/modules/services/home-automation/zwave-js-ui.nix
View file

@ -111,6 +111,7 @@ in
SystemCallFilter = [ SystemCallFilter = [
"@system-service @pkey" "@system-service @pkey"
"~@privileged @resources" "~@privileged @resources"
"@chown"
]; ];
UMask = "0077"; UMask = "0077";
}; };

2
nixos/tests/zwave-js-ui.nix
View file

@ -25,7 +25,7 @@ import ./make-test-python.nix (
machine.wait_for_unit("zwave-js-ui.service") machine.wait_for_unit("zwave-js-ui.service")
machine.wait_for_open_port(9999) machine.wait_for_open_port(9999)
machine.wait_until_succeeds("journalctl --since -1m --unit zwave-js-ui --grep 'Listening on port 9999host :: protocol HTTP'") machine.wait_until_succeeds("journalctl --since -1m --unit zwave-js-ui --grep 'Listening on port 9999host :: protocol HTTP'")
machine.wait_for_file("/var/lib/zwave-js-ui/nodes.json") machine.wait_for_file("/var/lib/zwave-js-ui/users.json")
''; '';
} }
) )